diff options
| author | Frank Karlitschek <frank@owncloud.org> | 2012-05-06 23:06:38 +0200 |
|---|---|---|
| committer | Frank Karlitschek <frank@owncloud.org> | 2012-05-06 23:06:38 +0200 |
| commit | d2b0de614eb3bbcdb2eae90929af48a69777f49c (patch) | |
| tree | a30de7fd8b4355a7df530018c9d7cac51b27353b /index.php | |
| parent | 1945cd694636def02a2b2d4fb36720b3f0aeeb10 (diff) | |
| download | nextcloud-server-d2b0de614eb3bbcdb2eae90929af48a69777f49c.tar.gz nextcloud-server-d2b0de614eb3bbcdb2eae90929af48a69777f49c.zip | |
fix an XSS bug
Diffstat (limited to 'index.php')
| -rw-r--r-- | index.php | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/index.php b/index.php index b9872a906d7..91f0cfb5e48 100644 --- a/index.php +++ b/index.php @@ -115,6 +115,6 @@ elseif(OC_User::isLoggedIn()) { if(is_null(OC::$REQUESTEDFILE)){ $sectoken=rand(1000000,9999999); $_SESSION['sectoken']=$sectoken; - OC_Template::printGuestPage('', 'login', array('error' => $error, 'sectoken' => $sectoken, 'redirect' => isset($_REQUEST['redirect_url'])?$_REQUEST['redirect_url']:'' )); + OC_Template::printGuestPage('', 'login', array('error' => $error, 'sectoken' => $sectoken, 'redirect' => isset($_REQUEST['redirect_url'])?strip_tags($_REQUEST['redirect_url']):'' )); } } |